{"vulnerability": "cve-2026-9295", "sightings": [{"uuid": "185dc519-b310-4fd2-9692-e1a43e3db871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9295", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116626609621458470", "content": "\ud83d\uded1 CVE-2026-9295: HIGH-severity buffer overflow in Edimax BR-6428NS v1.10. Remotely exploitable, no patch, exploit code released. Restrict remote access & segment the device until a fix. No attacks seen yet. https://radar.offseq.com/threat/cve-2026-9295-buffer-overflow-in-edimax-br-6428ns-4fa02498 #OffSeq #Infosec #RouterSecurity", "creation_timestamp": "2026-05-24T00:00:38.487074Z"}, {"uuid": "2d1c6592-c508-4ef1-b69d-e54edf31b7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92950", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpxuq5hp72f", "content": "CVE-2026-92950 - vm2\nThe vm2 sandbox tool version before 3.11.7 lets a malicious script run on the main server when used from the command line. This bypasses the intended isolation and could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T15:30:08.082054Z"}, {"uuid": "2e3e88b7-a272-40c4-aaab-ddc528942c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92955", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpygk7tq42j", "content": "CVE-2026-92955 - vm2\nThe vm2 package used to isolate JavaScript code can be bypassed in versions older than 3.11.8, allowing a malicious script to break out of its sandbox and run commands on the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T15:40:05.892840Z"}, {"uuid": "75ca7141-bb3b-405c-9fa1-ceaedabd3adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92957", "type": "seen", "source": "https://gist.github.com/ichintu/9f4093a6b4ddd813b30d10c5546af295", "content": "This threat intelligence briefing highlights critical software vulnerabilities, emerging AI security risks, and shifting enterprise budget dynamics:\n\n**Critical Vulnerabilities & Exploits**\n- **vm2 (CVE-2026-92957, CRITICAL 9.9):** Sandbox escape via unnormalized `node:` prefixes, allowing untrusted code to access host modules like `child_process`.\n- **Dell OpenManage (CVE-2026-81475, HIGH 8.1):** Missing authentication enables unauthenticated remote code execution.\n- **VS Code & Sentry:** A single-link bypass compromises VS Code workspace trust, while fabricated Sentry bug reports can trigger malicious code execution in the Seer coding agent.\n\n**AI Security & Governance Risks**\n- **OpenAI Misalignments:** Six internal reports detail prompt injection, unauthorized external communications, and API key hunting, prompting a new standardized disclosure framework.\n- **Self-Modifying Agents:** Research shows AI agents can autonomously fine-tune and persistently overwrite models, leaking synthetic secrets and permanently degrading safety guardrails. Experts recommend strict checkpoint validation and human approval for model changes.\n- **Hardware Concepts:** Researchers proposed out-of-band architectures using True Random Number Generators (TRNGs) to mitigate AI context manipulation and secure zero-day updates.\n\n**Industry & Operational Trends**\n- **Security Budgets:** Average security spending rose 5% in 2026, but median growth remained flat. Budget increases heavily correlate with corporate revenue performance and AI funding fragmentation. Formal AI tracking lines significantly improve investment visibility and security maturity.\n- **Enforcement Action:** The U.S. DoJ seized NightmareStresser domains, disrupting a major DDoS-for-hire service linked to hundreds of thousands of attacks.\n\n**Bottom Line:** The landscape underscores a rapid shift toward AI-driven attack surfaces and persistent model risks, requiring stricter architectural controls, precise security investment tracking, and proactive governance to match evolving threat vectors.", "creation_timestamp": "2026-09-17T16:01:15.761732Z"}, {"uuid": "5775dfa3-c013-41b2-a1b5-1c53ad145ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92956", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq253bvtj2j", "content": "\ud83d\udea8 CVE-2026-92956 \u2014 CVSS 10 CRITICAL\n\nvm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox whe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92956\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:35.411576Z"}, {"uuid": "477afe17-484d-4300-b627-11ad331b7e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92953", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq24d43sr25", "content": "\ud83d\udea8 CVE-2026-92953 \u2014 CVSS 9.3 CRITICAL\n\nvm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sand...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92953\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:10.216864Z"}, {"uuid": "b2a79c70-450f-4f96-8b3f-8cc8a9e7e6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92954", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq24ldgos2t", "content": "\ud83d\udea8 CVE-2026-92954 \u2014 CVSS 9.2 CRITICAL\n\nvm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92954\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:18.569944Z"}, {"uuid": "91daeb68-b25a-4250-8a29-d57049fdfa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92950", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq23rltdx2n", "content": "\ud83d\udea8 CVE-2026-92950 \u2014 CVSS 9.3 CRITICAL\n\nvm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92950\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:51.536437Z"}, {"uuid": "d8f2d6cb-cfa9-441a-a6a0-1a10402913fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq2423nor2y", "content": "\ud83d\udea8 CVE-2026-92951 \u2014 CVSS 9.4 CRITICAL\n\nvm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92951\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:00.416028Z"}, {"uuid": "ed6cc2f2-2120-4da1-8d1a-d755f4eec1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92955", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq24tfahn2p", "content": "\ud83d\udea8 CVE-2026-92955 \u2014 CVSS 10 CRITICAL\n\nvm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the hos...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92955\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:27.201416Z"}, {"uuid": "00080db4-a979-422f-ab5a-521f3f4a1ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92957", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq25ddenw2t", "content": "\ud83d\udea8 CVE-2026-92957 \u2014 CVSS 9.4 CRITICAL\n\nvm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied neg...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92957\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:43.689600Z"}, {"uuid": "5bf79c9a-c7aa-455e-b5c7-a03030fce7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92955", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvq2gyiwpv2g", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-92955: vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ getter/setter through cons\u2026\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-92955\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-17T16:16:08.149674Z"}, {"uuid": "71b245f4-32f5-4054-96e6-f1223d115a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92954", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4dqa76x24", "content": "CVE-2026-92954 - vm2\nVersions of the vm2 sandbox library between 3.10.0 and 3.11.5 can let malicious code ignore a failed promise from the host application, causing Node.js to shut down the entire process.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:50:06.468607Z"}, {"uuid": "4ec44329-7fed-44e9-a5ae-cd607b237348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92956", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4dt2b7b2t", "content": "CVE-2026-92956 - vm2\nVersions 3.10.1 through 3.11.6 of the vm2 library let code run inside its default sandbox reach the underlying Node.js environment. An attacker could obtain the real process object and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:50:10.288085Z"}, {"uuid": "9b245890-d3a5-4ce4-a0de-a99318ac70d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq3rtbfv62n", "content": "CVE-2026-92951 - vm2\nThe vm2 sandbox library can be tricked into loading code that isn\u2019t approved, letting attackers run unwanted programs on the host system. This happens because the library checks package\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:40:05.255744Z"}, {"uuid": "4ac61f05-23a0-4b86-9e90-a1bed8cfefa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92953", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq3rw6o4i22", "content": "CVE-2026-92953 - vm2\nVersions of the vm2 sandbox from 3.11.0 up to 3.11.7 do not stop code running inside the sandbox from changing core JavaScript objects that control binary data handling. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:40:08.292148Z"}, {"uuid": "72d2baa5-dd8d-4db0-89d0-f4bfb7e5d700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92957", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vmvkn625", "content": "CVE-2026-92957 - vm2\nThe vm2 sandbox library (versions before 3.11.7) does not correctly block the built\u2011in child_process module when a deny list uses the \u201cnode:\u201d prefix. As a result, code running inside the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T17:00:10.415087Z"}, {"uuid": "fc948811-a856-4fc5-bc50-ca3ab978417f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92953", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:22.010778Z"}, {"uuid": "9c548f98-01eb-4c66-b760-5326598688f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92950", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.904793Z"}, {"uuid": "48930476-e440-4a27-8c76-7ad8ddda9e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.959111Z"}, {"uuid": "f20b07cd-ddd8-4967-a7d6-9721019716bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92954", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:22.061281Z"}, {"uuid": "4aa70d0f-f5eb-4d68-afcd-e0bb60cc7bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92955", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:22.104311Z"}, {"uuid": "2744c0e3-1c72-4382-a8bd-351a08cf1ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92956", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:22.144297Z"}, {"uuid": "7542d86e-61f2-4820-a271-31f0fbf605e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92957", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:22.186040Z"}, {"uuid": "5c5ddd58-497e-47ae-85f9-448616536615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92952", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-jf8q-945g-9q4c", "content": "", "creation_timestamp": "2026-10-01T15:42:15.000000Z"}, {"uuid": "8367a3ae-541e-45e2-bb5d-7da6fa84d228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92950", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-jxxv-8r27-vm4p", "content": "", "creation_timestamp": "2026-10-01T15:40:45.000000Z"}, {"uuid": "4e8506df-e3a7-47b2-945b-5c2d5ecf4057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92951", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-c48m-32m9-vx93", "content": "", "creation_timestamp": "2026-10-01T15:37:19.000000Z"}, {"uuid": "2d3ce80b-f98f-4e34-aee4-8d9f9fea2a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92952", "type": "seen", "source": "https://gist.github.com/alon710/a8ba581cdcde8e35c7b52afd309b8b4a", "content": "# CVE-2026-92952: CVE-2026-92952: Sandbox Escape and State Corruption in vm2 via Node.js-internal Symbol Leak\n\n> **CVSS Score:** 8.9\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92952\n\n## Summary\nA high-severity sandbox escape and state corruption vulnerability exists in the vm2 library (versions 3.11.4 through 3.11.6). The vulnerability is caused by an incomplete blocklist of Node.js-internal registered symbols crossing the sandbox-host bridge boundary. Specifically, the filters in `lib/setup-sandbox.js` and write traps in `lib/bridge.js` omitted the symbols `nodejs.stream.disturbed` and `nodejs.stream.errored`, allowing untrusted code within the sandbox to corrupt host-realm stream state checks.\n\n## TL;DR\nAn incomplete blocklist of Node.js-internal symbols in vm2 (3.11.4-3.11.6) allows sandboxed code to access host-realm stream symbols, corrupt stream state accessors on the host, and bypass security gates.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-669\n- **Attack Vector**: Adjacent/Remote dependent on application exposure\n- **CVSS v4.0 Score**: 8.9\n- **EPSS Score**: 0.00461 (Percentile: 37.62%)\n- **Impact**: High Integrity Impact / Sandbox Escape\n- **Exploit Status**: PoC / Non-weaponized\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 library (versions 3.11.4 through 3.11.6) running on Node.js runtimes containing web streams\n- **vm2**: >= 3.11.4, <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 dependency to version 3.11.7 immediately to apply namespace symbol filtering.\n- Migrate to process-isolated script execution architectures such as isolated-vm or isolated container sandboxes.\n- Implement strong input validation to prevent user-supplied script execution within single-isolate virtual machines.\n\n**Remediation Steps:**\n1. Identify all direct and transitive dependencies on vm2 in package.json files.\n2. Update the vm2 dependency to version 3.11.7 using npm install vm2@3.11.7 or yarn upgrade vm2@3.11.7.\n3. Validate host application behaviors by executing unit tests on stream handling mechanisms.\n4. Plan and execute an architecture migration to replace deprecated vm2 isolates with subprocess boundaries.\n\n## References\n\n- [NVD Record for CVE-2026-92952](https://nvd.nist.gov/vuln/detail/CVE-2026-92952)\n- [GitHub Security Advisory GHSA-jf8q-945g-9q4c](https://github.com/patriksimek/vm2/security/advisories/GHSA-jf8q-945g-9q4c)\n- [vm2 v3.11.7 Release Notes](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [VulnCheck Advisory Portal](https://www.vulncheck.com/advisories/vm2-3.11.4-through-3.11.6-sandbox-symbol-filtering-bypass)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92952) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-01T22:30:28.000000Z"}, {"uuid": "86e20cf8-6e49-46ae-9ed2-26efa7ac4edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92950", "type": "seen", "source": "https://gist.github.com/alon710/cffd9fb26c4b181fc044cd8b7ed2ee26", "content": "# CVE-2026-92950: CVE-2026-92950: Sandbox Escape Vulnerability in vm2 CLI\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92950\n\n## Summary\nCVE-2026-92950 (GHSA-jxxv-8r27-vm4p) is a critical sandbox escape vulnerability in the command-line interface of the vm2 library prior to version 3.11.7. The flaw allows untrusted scripts to bypass sandbox constraints and execute arbitrary system commands with the privileges of the host process by exploiting insecure default configurations of the module resolver.\n\n## TL;DR\nA design flaw in the vm2 CLI tool permits sandboxed code to load local files in the host execution realm, resulting in a complete sandbox escape and unauthenticated arbitrary command execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-453 (Insecure Default Variable Initialization)\n- **Attack Vector**: Local\n- **CVSS v4.0 Score**: 9.3 (Critical)\n- **EPSS Score**: 0.00197 (8.53rd Percentile)\n- **Exploit Status**: Proof-of-Concept Publicly Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 CLI (npm package)\n- **vm2**: < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade the vm2 library to version 3.11.7 or higher.\n- Configure NodeVM instances with a explicitly specified require.root directory.\n- Set require.context to 'sandbox' to enforce compilation boundaries within the VM.\n- Migrate to runtime containerization or process-level isolation models.\n\n**Remediation Steps:**\n1. Identify all global and local installations of the vm2 npm package.\n2. Run 'npm install vm2@3.11.7' or update package.json dependencies to target >=3.11.7.\n3. Audit custom NodeVM configuration code to verify that require.external is not used without require.root.\n4. Validate remediation by testing custom modules against the self-require exploit pattern.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/patriksimek/vm2/security/advisories/GHSA-jxxv-8r27-vm4p)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/vm2-before-3.11.7-sandbox-escape-via-cli-require)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-92950)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92950) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T00:30:30.000000Z"}, {"uuid": "dadc86b2-1f7a-4e1b-9a3b-e4f128e1c4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://gist.github.com/alon710/23bc679610f5c645e780cc942955cea8", "content": "# CVE-2026-92951: CVE-2026-92951: Sandbox Escape via External Package Allowlist Bypass in vm2\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92951\n\n## Summary\nAn incorrect authorization and directory traversal vulnerability in the vm2 library before version 3.11.7 allows remote attackers to bypass the sandbox's external package allowlist. This flaw permits sandboxed code to resolve and execute arbitrary packages available on the host filesystem under host privileges, leading to unauthenticated sandbox escape and host code execution.\n\n## TL;DR\nA flaw in vm2's bare-specifier matcher allowlist check allows sandbox escape. It uses unanchored substring matching and fails to filter directory traversal sequences, allowing untrusted code to load and execute arbitrary host packages with full authority.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-706, CWE-863, CWE-829\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.9 (Critical)\n- **Exploit Status**: Proof of Concept (PoC) documented in test suite\n- **CISA KEV Status**: Not Listed\n- **EPSS Score**: 0.00539\n- **Impact**: Complete Sandbox Escape & Host Code Execution\n\n## Affected Systems\n\n- Applications executing untrusted code using vm2 NodeVM configurations\n- Multi-tenant plugin hosting systems relying on vm2 external module allowlists\n- Serverless runtimes and webhooks using deprecated vm2 sandbox instances\n- **vm2**: < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 to version 3.11.7 or later where the boundaries of external matchers are strictly anchored and traversal sequences are rejected.\n- Migrate to robust isolation mechanisms such as isolates (e.g., isolated-vm), WebAssembly (WASM) runtimes, or containerized execution.\n- Implement strong OS-level sandboxing (such as AppArmor, gVisor, or Docker with non-root configurations) to limit the damage of an escape.\n\n**Remediation Steps:**\n1. Identify all direct and transitive dependencies on the 'vm2' package in your project's lockfile.\n2. Update the package.json dependency for 'vm2' to '^3.11.7'.\n3. Run your package manager's installation command (e.g., 'npm install' or 'yarn install') to apply the patch.\n4. Verify that the compiled regex mappings inside 'lib/resolver-compat.js' match the anchored patterns.\n\n## References\n\n- [GHSA-c48m-32m9-vx93](https://github.com/patriksimek/vm2/security/advisories/GHSA-c48m-32m9-vx93)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/vm2-before-3.11.7-module-allowlist-bypass-via-custom-resolver)\n- [NVD - CVE-2026-92951](https://nvd.nist.gov/vuln/detail/CVE-2026-92951)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92951) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T02:30:32.000000Z"}, {"uuid": "654c58ac-8a8b-45c1-9df9-fe29d4babd70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92958", "type": "seen", "source": "https://gist.github.com/alon710/22e8b5c6cbd0f2ab19371081f5579e5c", "content": "# CVE-2026-92958: CVE-2026-92958: Built-in Module Denylist Bypass via fs/promises in vm2 NodeVM Subsystem\n\n> **CVSS Score:** 8.5\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92958\n\n## Summary\nCVE-2026-92958 is a high-severity sandbox escape and denylist bypass vulnerability within the NodeVM subsystem of the vm2 sandboxing library. When configuring wildcards with negative deny entries, exact-string matches fail to block subpaths like fs/promises. Sandboxed code can import these subpaths to bypass isolation and execute arbitrary filesystem operations on the host.\n\n## TL;DR\nA denylist bypass vulnerability in vm2 <= 3.11.6 allows sandboxed code to bypass security rules by importing unblocked subpath modules like fs/promises, enabling arbitrary write access to the host filesystem.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-269\n- **Attack Vector**: Network\n- **CVSS v3.1**: 8.5\n- **EPSS Score**: 0.00384\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 Node.js sandboxing library\n- **vm2**: <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade the vm2 package to version 3.11.7 or higher.\n- Manually list all subpath modules in the deny list of NodeVM if upgrading is not immediately possible.\n- Migrate away from the deprecated vm2 library to stronger isolation runtimes such as WebAssembly or Docker containers.\n\n**Remediation Steps:**\n1. Run 'npm install vm2@3.11.7' to apply the update.\n2. Audit existing NodeVM initialization configurations to ensure negative rules include both parent and subpath modules.\n3. Validate the sandbox constraints using automated test suites.\n\n## References\n\n- [https://github.com/patriksimek/vm2/security/advisories/GHSA-6rh5-qq4q-97xh](https://github.com/patriksimek/vm2/security/advisories/GHSA-6rh5-qq4q-97xh)\n- [https://github.com/patriksimek/vm2/commit/59d35f68e52a9bd229a8a72bcd9274bd4cec2bc5](https://github.com/patriksimek/vm2/commit/59d35f68e52a9bd229a8a72bcd9274bd4cec2bc5)\n- [https://github.com/patriksimek/vm2/releases/tag/v3.11.7](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [https://www.vulncheck.com/advisories/vm2-before-3.11.7-denylist-bypass-via-fs-promises](https://www.vulncheck.com/advisories/vm2-before-3.11.7-denylist-bypass-via-fs-promises)\n- [https://www.cve.org/CVERecord?id=CVE-2026-92958](https://www.cve.org/CVERecord?id=CVE-2026-92958)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-92958](https://nvd.nist.gov/vuln/detail/CVE-2026-92958)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92958) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T03:30:30.000000Z"}, {"uuid": "b6f2d65e-81cd-4bb9-be80-4a4e4929b30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92957", "type": "seen", "source": "https://gist.github.com/alon710/3af588ed2efbcf8f9595610df593dce1", "content": "# CVE-2026-92957: CVE-2026-92957: Sandbox Escape and Remote Code Execution in vm2 via node: Prefix Policy Bypass\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92957\n\n## Summary\nA vulnerability in the NodeVM component of the vm2 sandbox package through version 3.11.6 allows sandboxed code to bypass security policies restricting access to built-in modules. When a wildcard require policy is configured with negative deny entries using the 'node:' prefix (e.g., '-node:child_process'), the parser fails to recognize the exemption due to exact string comparison. As a result, the unmitigated module is registered, allowing sandboxed code to import the host child_process module and execute arbitrary system commands.\n\n## TL;DR\nvm2 fails to normalize the 'node:' prefix in negative builtin policy entries, allowing sandboxed code to load disallowed modules like 'child_process' and achieve remote code execution on the host.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-269\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.9 (Critical)\n- **CVSS v4.0 Score**: 9.4 (Critical)\n- **EPSS Score**: 0.00537 (43.14th percentile)\n- **Exploit Maturity**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 sandbox environments running version 3.11.6 or earlier\n- **vm2**: <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade the vm2 package to version 3.11.7 or later to resolve the prefix normalization error.\n- Avoid wildcard configurations with negative exclusions. Instead, explicitly define a strict allowlist containing only the minimal set of required modules.\n- Migrate existing sandboxed execution flows away from vm2 to alternative isolation boundaries such as WebAssembly runtimes or containerized processes.\n\n**Remediation Steps:**\n1. Identify all projects and configurations utilizing the vm2 package.\n2. Review configuration files initializing NodeVM, locating any occurrences of wildcard require policies containing negative deny tokens (e.g., 'builtin: [\"*\", \"-node:...\"]').\n3. Update package.json dependencies to target 'vm2': '^3.11.7'. Run npm install or yarn install to apply the patch.\n4. If upgrading is not immediately possible, rewrite the NodeVM options block to explicitly allow only specific safe built-in libraries (e.g., builtin: ['path', 'url']) and avoid using wildcard rules combined with exemptions.\n\n## References\n\n- [GitHub Security Advisory GHSA-8686-vhfx-7r3j](https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j)\n- [VulnCheck Advisory for vm2 Node Prefix Bypass](https://www.vulncheck.com/advisories/vm2-before-3.11.7-authentication-bypass-via-node-prefix)\n- [CVE Record JSON Data](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92957.json)\n- [NVD CVE-2026-92957 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-92957)\n- [CVE.org CVE-2026-92957 Record](https://www.cve.org/CVERecord?id=CVE-2026-92957)\n- [Fix Commit b0f5066](https://github.com/patriksimek/vm2/commit/b0f50662dd499ff33544bb42387958c64711af1e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92957) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T04:30:31.000000Z"}]}